Security Update 3.0 84

Critical Photon OS Security Update

Summary

Advisory Id : PHSA-2020-3.0-0084

Type : Security

Severity : ['Critical', 'Important', 'Moderate', 'Low']

Issue date : 2020-04-24

Affected Release: 3.0

Details

Updates of ['kubernetes', 'openjdk11'] packages of Photon OS have been released.

Affected Packages

Critical

openjdk11 - ['CVE-2018-3183']

Important

openjdk11 - ['CVE-2018-3149', 'CVE-2018-3169', 'CVE-2020-2805', 'CVE-2018-2964', 'CVE-2020-2816', 'CVE-2020-2803', 'CVE-2018-2941', 'CVE-2019-2602']

Moderate

kubernetes - ['CVE-2019-11250', 'CVE-2020-8552', 'CVE-2019-11251']

openjdk11 - ['CVE-2019-2989', 'CVE-2018-2972', 'CVE-2019-2762', 'CVE-2018-11212', 'CVE-2019-2745', 'CVE-2020-2655', 'CVE-2019-2999', 'CVE-2019-2816', 'CVE-2019-2977', 'CVE-2020-2601', 'CVE-2019-2821', 'CVE-2020-2767', 'CVE-2018-2973', 'CVE-2019-2949', 'CVE-2020-2781', 'CVE-2020-2830', 'CVE-2020-2800', 'CVE-2019-2975', 'CVE-2018-3211', 'CVE-2019-2769', 'CVE-2019-2958', 'CVE-2018-3180', 'CVE-2018-14048', 'CVE-2019-2684', 'CVE-2018-2940', 'CVE-2018-13785', 'CVE-2020-2593']

Low

openjdk11 - ['CVE-2019-2422', 'CVE-2019-2945', 'CVE-2019-2973', 'CVE-2020-2583', 'CVE-2018-3150', 'CVE-2018-3157', 'CVE-2019-2818', 'CVE-2019-2426', 'CVE-2020-2756', 'CVE-2019-2964', 'CVE-2020-2590', 'CVE-2020-2754', 'CVE-2020-2755', 'CVE-2019-2981', 'CVE-2020-2757', 'CVE-2019-2988', 'CVE-2019-2786', 'CVE-2019-2766', 'CVE-2019-2933', 'CVE-2019-2962', 'CVE-2020-2654', 'CVE-2020-2778', 'CVE-2019-2983', 'CVE-2019-2894', 'CVE-2019-2987', 'CVE-2018-3136', 'CVE-2018-2952', 'CVE-2019-2992', 'CVE-2018-3139', 'CVE-2020-2773', 'CVE-2019-2978']

Solution

Update the affected packages (tdnf update package)

Updated Packages Information

kubernetes-1.12.10-3.ph3.x86_64.rpm | size : 186M , sha256 : d43feee6dd15d4f97488750c68ecc7eafe88df787b90cfee0d2770ac6af2bf12 , build time : Fri, 24 Apr 2020 01:34:53 UTC

kubernetes-1.14.10-1.ph3.x86_64.rpm | size : 184M , sha256 : e65c776af7c3850ed6ae26fe73e55f66ea9a13a73bfeb89f5f6fc81bea0470d1 , build time : Fri, 24 Apr 2020 01:33:25 UTC

kubernetes-debuginfo-1.12.10-3.ph3.x86_64.rpm | size : 139M , sha256 : 7e90d66ed935fc985d0b4f25e6a4d90275fcdb6f020541bdf66620a9ccc9bc43 , build time : Fri, 24 Apr 2020 01:34:53 UTC

kubernetes-kubeadm-1.12.10-3.ph3.x86_64.rpm | size : 11M , sha256 : 1c5f8ba4cad929a1bccedbf2c38d7b058a9310983f8c11e7e092eb80834564fa , build time : Fri, 24 Apr 2020 01:34:53 UTC

kubernetes-kubeadm-1.14.10-1.ph3.x86_64.rpm | size : 11M , sha256 : 024c04b7e833a458846752fc6df770f081cc37bf2351271ac4d40ddc997811a2 , build time : Fri, 24 Apr 2020 01:33:25 UTC

kubernetes-kubectl-extras-1.12.10-3.ph3.x86_64.rpm | size : 51M , sha256 : e5a3b0c2fb4c2600c2101a823c038c212d9c634b7d0be4ad32b3501dfabe232f , build time : Fri, 24 Apr 2020 01:34:53 UTC

kubernetes-kubectl-extras-1.14.10-1.ph3.x86_64.rpm | size : 36M , sha256 : c368d4bc63c17b61fdb2f254f55f6fdf43cfa5ce00b037b6a3ad6cf663e24250 , build time : Fri, 24 Apr 2020 01:33:25 UTC

kubernetes-pause-1.12.10-3.ph3.x86_64.rpm | size : 284K , sha256 : c53e240591da99da023b5743ee9bb262c818f19aec1a8766e30f3335ced40b06 , build time : Fri, 24 Apr 2020 01:34:53 UTC

kubernetes-pause-1.14.10-1.ph3.x86_64.rpm | size : 284K , sha256 : 2810339fd4db32567500ef2f7926edd966bf532b4b6350c7d44477a344df19df , build time : Fri, 24 Apr 2020 01:33:25 UTC

openjdk11-11.0.7-1.ph3.x86_64.rpm | size : 182M , sha256 : af1d4b4877235d9acf22ec57ec3240d552b50adad81b7f5046b4b8f911d12425 , build time : Fri, 24 Apr 2020 01:41:05 UTC

openjdk11-debuginfo-11.0.7-1.ph3.x86_64.rpm | size : 215M , sha256 : 0e02c9ddcc89ca5554e1971bfa4b94a236330d281f3e9fb905af1125927037ea , build time : Fri, 24 Apr 2020 01:41:05 UTC

openjdk11-doc-11.0.7-1.ph3.x86_64.rpm | size : 5.6M , sha256 : 3f8b2f1f4a6921578c6fa587ab914cdafa2c1547620afa2e06c3a5c8d229c992 , build time : Fri, 24 Apr 2020 01:41:05 UTC

openjdk11-src-11.0.7-1.ph3.x86_64.rpm | size : 52M , sha256 : 4eec525d9345cfee95208d81672954a0aa5db34a1f2eaf58f62c2eba4dfc06f7 , build time : Fri, 24 Apr 2020 01:41:05 UTC